Privacy

Who we are

Counter Club is operated by the Not a Chain team, trading under an Australian sole-trader ABN, provided on request. This page explains what we collect, why, where it is kept, and your rights. It is written for two kinds of people: shop owners who use Counter Club, and members of a shop's club whose mobile number sits in it.

What we collect from shop owners

At sign-up: your business name, email address, a password (stored hashed), and an Australian mobile number, which we confirm with a texted code. If you choose the Free plan, we record the marketing consent you gave: the exact sentence shown, its version, the time, your IP address and browser, and the method. If you choose a paid plan, we hold a reference to your customer record at Stripe and the status of your subscription. We never hold card numbers.

While you use the product: your card settings, your members (below), your campaigns and their delivery status, and usage counts against your plan.

What we collect about members

When a customer joins a shop's club we record their mobile number, confirmed by a texted code, the time they joined, and optionally a first name and an email address. An email address is used for campaigns only after the member confirms it from a link we send. We record each stamp, each reward code, and whether the member has opted out of messages. We do not record purchases, amounts, or anything the shop does not press.

A member can stop a shop's messages at any time from the link in any message or by replying STOP to a text from the shop's number. Stopping keeps their stamps and rewards. A member who wants their record removed can ask the shop or email hello@notachain.com.au.

Why we collect it

To run the loyalty card for the shop, to send the messages the shop writes to the members who agreed to receive them, to bill the shop, to keep the service secure, and, for Free plan owners only, to carry out the marketing consent they gave.

Where it is kept

The application runs on Vercel in Sydney and the database on Supabase in Sydney, with daily backups. Texts and phone numbers are handled by Vonage and email by Postmark; either may process a message outside Australia in order to deliver it. Payments are handled by Stripe, which holds card details under its own privacy policy. The QR image on the Loyalty card page is drawn by a third-party QR service from your join link, which carries only your public join code. Otherwise your data stays in Australia.

Who sees it

The shop owner sees their own members. No shop can see another shop's members. The Not a Chain team can see data when needed to run or support the service. For Free plan owners, the business contact details are shared with the partners named on our partners page for the purpose described in the consent sentence, and with no one else. Member data is never shared for marketing, never sold, and never used by Not a Chain or its partners to contact members.

How long we keep it

For as long as the shop's account exists, and for a reasonable period afterwards for billing and legal records. A removed member is deleted from the live service; backups age out on their schedule.

Your rights

You can ask what we hold about you, ask for it to be corrected, or ask for it to be deleted, by emailing hello@notachain.com.au; the answer comes inside one business day on Melbourne time. Nothing here limits your rights under the Privacy Act 1988 or the Australian Consumer Law.

Changes

If this page changes in a way that matters, we email shop owners at their confirmed address before the change takes effect.